Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: R9TORI1Bt7BnAVY2mYE4ERepmi3utIGvK6lJhF7zpBI=
Subject key identifier: 81:32:58:C4:E7:6A:89:53:B5:DD:04:E6:CD:96:4F:99:D8:64:E4:FC
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0196127D15557AFCC03712454340F6E9FAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 03A8
Signing time: Mon 07 Apr 2025 23:01:49 +0000
Manifest this update: Mon 07 Apr 2025 23:01:49 +0000
Manifest next update: Tue 08 Apr 2025 23:01:49 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: 0uCmX4nKzPVGbQwnpliEtq2vytbKpl+tcZIE8N68Lq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7d:15:55:7a:fc:c0:37:12:45:43:40:f6:e9:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Apr 7 23:01:49 2025 GMT
Not After : Apr 8 23:01:49 2025 GMT
Subject: CN=813258c4e76a8953b5dd04e6cd964f99d864e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:08:74:97:7d:46:df:02:e7:eb:de:25:a6:
0d:ca:ba:cc:4c:59:b4:ab:b7:2a:b2:67:48:e5:27:
cf:8d:12:e8:24:db:ff:cb:60:87:93:98:0d:f3:71:
99:c9:2d:0f:07:d8:5e:cc:4c:50:92:00:8d:59:d9:
d6:1e:16:2e:fd:13:1a:d5:f6:b9:ed:ee:71:94:04:
63:75:40:96:b0:20:a9:36:57:ff:27:92:c2:c1:37:
45:30:6b:00:81:3f:b7:1b:35:9d:7f:31:b9:70:84:
bf:37:cd:33:bd:89:be:fc:47:a6:42:97:dd:87:f2:
5b:aa:da:09:98:94:ad:73:23:b0:c2:75:44:7f:72:
7d:f1:45:50:52:a5:a0:3a:d8:e6:df:a2:79:41:1c:
33:e9:7c:19:36:17:ea:c4:5a:9c:51:b6:ef:1a:51:
af:f6:c5:31:26:af:aa:7d:01:1f:e8:92:1f:c8:8a:
3d:9c:a0:04:f8:93:b3:0d:91:be:fc:76:9d:37:3c:
86:f8:75:8d:23:a3:f3:55:f9:a7:db:3f:74:52:e9:
2b:af:14:36:92:6e:3c:13:d6:16:39:da:76:51:8a:
3a:cc:eb:57:3b:d9:50:5f:f8:c0:31:42:b1:f0:2e:
f6:fe:a0:66:00:5c:20:36:41:0b:fd:46:d8:67:fe:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:58:C4:E7:6A:89:53:B5:DD:04:E6:CD:96:4F:99:D8:64:E4:FC
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:09:f4:42:00:61:7c:0d:7d:c8:52:b4:d9:78:a4:0f:d1:
69:8e:04:29:49:f4:aa:46:3e:84:bb:40:ed:80:5e:8d:7b:85:
82:02:6c:0b:59:da:e2:7c:32:5e:00:1e:7c:98:87:92:cc:77:
80:44:c5:0e:f5:ec:fc:e2:63:7f:6c:00:78:e6:3c:82:44:5f:
b9:48:46:16:bb:2f:e2:d4:0e:ed:1e:02:d1:1a:07:89:a6:58:
f1:73:a4:70:e3:56:d8:28:4f:b3:48:02:7b:f8:0c:8f:57:e3:
df:e7:40:5f:eb:0f:17:b9:50:24:99:14:45:83:da:75:b9:bd:
bb:ab:26:c6:85:97:f7:5c:80:96:1f:14:7d:16:39:32:1a:74:
5f:36:08:92:da:df:6a:24:09:47:e7:73:2c:32:fb:b1:76:bd:
2d:7f:87:32:e3:0c:96:0d:8a:fc:6b:2f:ef:51:f4:85:d2:1c:
36:dd:fc:33:55:8b:26:8d:e9:d9:ad:08:28:18:0c:7e:63:91:
e3:f6:dd:94:7c:27:43:86:c7:e4:14:39:cc:c5:f5:73:bb:76:
be:59:16:9c:c8:05:5b:1c:3c:7b:f2:82:89:fb:b9:a2:24:41:
fa:1b:10:cf:81:25:a9:48:2c:4a:6d:16:79:ae:33:a5:7d:60:
24:18:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:25:10 2025 by rpki-client